It's possible to pass PCI devices directly to the VM at which point they don't exist as far as the host OS is concerned. You can pass an entire USB hub to the VM and anything plugged into it is invisible to the host OS (at least by default).

Ok, but you certainly need root privileges to do that, in that case you could bypass the monitoring software in many other ways.